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GOVERNMENT  COMPUTERS 

Classified  By  Ambassador  Dennise  Mathieu  per  1.5  (b)  and  (d) 

IQ.  (C)  On  April  4,  Rainer  Ritter  (protect),  suspended  CEO  of 
the  Namibia  Financial  Institutions  Supervisory  Authority 
(NAMFISA) , informed  Ambassador  Mathieu  that  he  had  discovered 
irregularities  with  regard  to  NAMFISAQs  computer  system.  He 
further  stated  that  he  had  reported  those  irregularities  to 
the  local  police  and  Namibian  Anti-Crime  Commission. 
Subsequently,  Ritter  was  relieved  of  his  official  duties  at 
NAMFISA  and  is  now  facing  various  charges  of  misconduct 
himself . 

1.2.  (C)  Ritter  claimed  that  NAMFISAQs  system  had  been  used  to 

hack  into  the  computer  system  of  NamibiaQs  National  Planning 
Commission  (NPC).  In  addition  to  Namibian  government 
documents,  several  Millennium  Challenge  Corporation  (MCC) 
documents  reportedly  had  been  downloaded  from  the  NPC 
directorQs  computer  onto  the  NAMFISA  system.  Ritter  believes 
those  documents  were  forwarded  to  the  SWAPO  Party  Youth  League 
during  the  debate  last  fall  about  MCC  Compact  ratification. 
(Comment.  Post  believes  the  SWAPO  Party  Youth  League  obtained 
copies  of  draft  agreements  directly  from  the  NPC  Board  members 
due  to  the  timing  of  a Board  meeting  and  press  statements. 

End  comment. ) 

13.  (C)  Ritter  further  believes  that  the  NAMFISA  system  could 
be  linked  to  Chinese  cyber  security  incidences  reported  in  the 
news  recently.  He  found  it  odd  that  the  NAMFISA  computer 
regularly  accessed  the  following  IP  address  Q 239.255.255.250 
Q which  Ritter  traced  to  California,  outside  Los  Angeles. 

14.  (C)  Comment:  Ritter  is  considered  to  be  a straight  arrow. 

He  told  us  that  he  was  suspended  after  investigations  turned 
up  evidence  of  wrongdoing  by  senior  government  officials.  His 
claims  of  improprieties  at  NAMFISA  and  his  suspension  have 
been  reported  widely  in  the  local  news.  Sensitive  MCC 
documents  are  not  shared  with  the  NPC  Board  (the  Accountable 
Entity  for  the  MCC  compact),  thus  the  risk  of  compromise 
regarding  tenders,  for  example,  is  not  an  issue.  Documents 
such  as  drafts  of  the  Program  Implementation  Agreement  and  Tax 
Agreement  were  likely  on  the  NPC  directorQs  computer  at  the 
time  of  the  alleged  NAMFISA  intrusion,  and  both  are  now 
public.  However,  it  is  disturbing  that  GRN  systems  may  be 
highly  vulnerable  to  cyber  attacks  within  and  without  Namibia. 
Post  would  appreciate  any  information  that  is  learned  about 
the  IP  address  in  Para.  3. 
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